ShadowTalk host Adam alongside Kim, and Saul bring you the latest in threat intelligence. This week they cover:* Newly detected NOBELIUM malware creates persistent backdoor* Four individuals charged with wide-ranging BEC scheme* EU condemns Russian cyber activity ahead of electionsCheck out our latest Weekly Intelligence Summary: https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-1st-oct***Resources from this week’s podcast***[Digital Shadows Blog]What We’re Reading This Month[Digital Shadows Blog]Tactical Threat Intelligence and YouSubscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html Also, don’t forget to reach out to - [email protected] if you have any questions, comments, or suggestions for the next episodes.

ShadowTalk host Sean alongside Rick, Alec, and Ivan bring you the latest in threat intelligence. This week they cover:* FBI under fire about decryption keys * Microsoft goes passwordless* RaidForums left restricted area openhttps://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-24th-sept***Resources from this week’s podcast***[Digital Shadows Blog]Ukrainian-language Cybercriminal Markets: Do They Still Exist? https://www.digitalshadows.com/blog-and-research/ukrainian-language-cybercriminal-platforms/ [Digital Shadows Blog]Data Leakage Detection Best Practices: https://www.digitalshadows.com/blog-and-research/data-leakage-detection-best-practices/ [Digital Shadows Blog]Why CISOs Need to Understand IABs: https://www.digitalshadows.com/blog-and-research/why-cisos-and-executives-should-care-about-iabs/[Article]New Malware Attacking South American Organizations: https://thehackernews.com/2021/09/a-new-wave-of-malware-attack-targeting.html Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html Also, don’t forget to reach out to - [email protected] if you have any questions, comments, or suggestions for the next episodes.

ShadowTalk hosts Sean Nikkel and CISO, Rick Holland sit down with Dr. Tom Robinson, Chief Scientist and Co-Founder of Elliptic. They cover:* Dr. Robinson’s early days as a physicist before getting into the world of cybersecurity* Cyberthreats to Bitcoin and the Cryptocurrency landscape* Tracking Ransomware with Blockchain Analytics ***Resources from this week’s podcast***[Blog] Liquid Exchange Hack https://www.elliptic.co/blog/liquid-exchange-hacked-94-million-stolen[Blog] Cybercriminals Build Blockchain Analytics Toolhttps://www.elliptic.co/blog/cybercriminals-have-built-their-own-blockchain-analytics-tool [Blog] $600M In Cyrpto Stolenhttps://www.elliptic.co/blog/the-poly-network-hack-600-million-in-crypto-stolen-and-returned-in-24-hours [Webinar] Tracking Ransomware with Blockchain Analyticshttps://www.elliptic.co/webinars-events/tracking-ransomware-with-blockchain-analytics Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html Also, don’t forget to reach out to - [email protected] if you have any questions, comments, or suggestions for the next episodes. Be sure to follow Dr. Tom Robinson on Twitter @tomrobin!

ShadowTalk hosts Sean, Rick, Ivan, and Austin bring you the latest in threat intelligence. This week they cover:* Mozi botnet operators arrested in China, >1.5M devices since 2019* Groove gang releases creds of comp’d Fortinet appliances, ~500k * Splunk releases new PowerShell analytics for threat hunters, includes support for SOAR responsesGet this week's Intelligence Summary: https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-10th-september***Resources from this week’s podcast***Microsoft Advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444 CISA Advisoryhttps://twitter.com/USCERT_gov/status/1435342618704191491 [Blog] Splunk’s PowerShell Analytics https://www.splunk.com/en_us/blog/security/powershell-detections-threat-research-release-august-2021.html [Digital Shadows Blogs]The Neverending Ransomware Storyhttps://www.digitalshadows.com/blog-and-research/the-never-ending-ransomware-story/ Preventing Ransomwarehttps://www.digitalshadows.com/blog-and-research/preventing-ransomware-preventing-the-300-at-thermopylae/ Ransomware and Threat Intelhttps://www.digitalshadows.com/blog-and-research/protecting-against-ransomware-what-role-does-threat-intelligence-play/ What We’re Reading this Month https://www.digitalshadows.com/blog-and-research/what-were-reading-this-month-august-2021/ Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html Also, don’t forget to reach out to - [email protected] if you have any questions, comments, or suggestions for the next episodes.

ShadowTalk hosts Stefano, Chris, Kim, and Adam bring you the latest in threat intelligence. This week they cover:* The greatest comeback since Ronaldo rejoined UTD* ProxyToken and Lockfile* AlphaBay’s comeback***Resources from this week’s podcast***Social Media Monitoring Solutions Guidehttps://resources.digitalshadows.com/whitepapers-and-reports/social-media-monitoring-solutions-guideThe Never-ending Ransomware Storyhttps://www.digitalshadows.com/blog-and-research/the-never-ending-ransomware-story/LockFile Intermittent Encryption and Evasionhttps://news.sophos.com/en-us/2021/08/27/lockfile-ransomwares-box-of-tricks-intermittent-encryption-and-evasion/ProxyToken Lets Hackers Steal User Emailhttps://www.bleepingcomputer.com/news/security/microsoft-exchange-proxytoken-bug-can-let-hackers-steal-user-email/AlphaBay Rebootshttps://threatpost.com/rogue-marketplace-alphabay-reboots/168648/ Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html Also, don’t forget to reach out to - [email protected] if you have any questions, comments, or suggestions for the next episodes.

ShadowTalk hosts Sean, Ivan, Alec, and Rick Holland bring you the latest in threat intelligence. This week they cover:- Botnets are still the hotness - Mirai is growing again and Mozi’s made new moves- ShinyHunters are back!- Hacktivists take on governmentsGet this week’s intelligence summary at: https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-august-27***Resources from this week’s podcast***ShinyHuntershttps://www.digitalshadows.com/blog-and-research/the-eeveelution-of-shinyhunters-from-data-leaks-to-extortions/ Criminals weaponize social mediahttps://www.digitalshadows.com/blog-and-research/how-cybercriminals-weaponize-social-media/ Reverse scamshttps://www.digitalshadows.com/blog-and-research/no-honor-among-thieves-scamming-the-scammers/ Mirai & Mozi: https://www.microsoft.com/security/blog/2021/08/19/how-to-proactively-defend-against-mozi-iot-botnet/ https://securingsam.com/realtek-vulnerabilities-weaponized/ https://unit42.paloaltonetworks.com/mirai-variant-iot-vulnerabilities/ https://www.digitalshadows.com/blog-and-research/you-should-consider-forecasts-not-predictions/ HactivistsIran: https://zetter.substack.com/p/hackers-leak-surveillance-camera https://research.checkpoint.com/2021/indra-hackers-behind-recent-attacks-on-iran/ Belarus: https://www.bloomberg.com/news/articles/2021-08-24/belarus-hackers-seek-to-overthrow-local-government https://www.technologyreview.com/2021/08/26/1033205/belarus-cyber-partisans-lukashenko-hack-opposition/ Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html Also, don’t forget to reach out to - [email protected] if you have any questions, comments, or suggestions for the next episodes.

ShadowTalk hosts Adam, Chris, and Kim bring you the latest in threat intelligence. This week they cover:- Malicious use of TDS and the newly reported Prometheus TDS- Ransomware updates: Synack release decryption key and Vice Society targets PrintNightmare- The Microsoft phishing campaign that utilized morse code as an encryption mechanism Get this week’s intelligence summary at: https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-august-20***Resources from this week’s podcast***The Phight Against Phishing: https://www.digitalshadows.com/blog-and-research/the-phight-against-phishing/Leveraging Digital Shadows Premium Services: https://www.digitalshadows.com/blog-and-research/leveraging-digital-shadows-premium-services/ Prometheus TDS: https://blog.group-ib.com/prometheus-tdsSync Ransomware Releases Decryption Keys: https://www.bleepingcomputer.com/news/security/synack-ransomware-releases-decryption-keys-after-el-cometa-rebrand/PrintNightmare Attacks: https://www.bleepingcomputer.com/news/security/vice-society-ransomware-joins-ongoing-printnightmare-attacks/Microsoft Attackers Use Morse Code: https://www.microsoft.com/security/blog/2021/08/12/attackers-use-morse-code-other-encryption-methods-in-evasive-phishing-campaign/Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html Also, don’t forget to reach out to - [email protected] if you have any questions, comments, or suggestions for the next episodes.

ShadowTalk hosts Sean, Ivan, Charles, and CISO Rick Holland bring you the latest in threat intelligence. This week they cover:- CISO Rick Holland touches on the latest news on AlphaBay - could the forum be back? - The team chat about LockBit’s big hit on Accenture- Charles runs through Krebs Security run-in with a scammer who had been targeted by a phishing site for BriansClub- Ivan talks about the Chinese espionage group that pulled a false flag to Iran and Israel - Sean delves into the latest news on the $600 Million crypto hackGet this week’s intelligence summary at: https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-13th-august***Resources from this week’s podcast***The State of APTs in 2021https://www.digitalshadows.com/blog-and-research/the-nation-state-of-apts-in-2021/ Understanding Smishing Attackshttps://www.digitalshadows.com/blog-and-research/understanding-smishing-attacks/ Krebs Security Run-in with Scammed Scammer https://krebsonsecurity.com/2021/08/phishing-sites-targeting-scammers-and-thieves/Chinese Espionage Campaign in Israel https://www.fireeye.com/blog/threat-research/2021/08/unc215-chinese-espionage-campaign-in-israel.html$600 Million Crypto Hack https://www.bleepingcomputer.com/news/security/over-600-million-reportedly-stolen-in-cryptocurrency-hack/Other Resources: https://www.bbc.com/news/business-58180692

ShadowTalk hosts Adam, Dylan and Kim bring you the latest in threat intelligence. This week they cover:- Recent Wiper malware targeting the 2020 Tokyo Olympics - Dylan dives into the MeteorExpress attack, which targeted Iranian transport systems - Kim runs through PwnedPiper vulnerabilities that impact pneumatic tube systems in hospitals - could this lead to a ransomware attack? - Adam and the team discuss a new machine learning security tool called Hopper, which is used to detect lateral movement - before discussing the future of machine learning and AI in cyber security- Plus, the team answers some of your questions!Get this week’s intelligence summary at: https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-6th-august***Resources from this week’s podcast***IAB Q2 roundup https://www.digitalshadows.com/blog-and-research/initial-access-brokers-in-q2-2021/ Supply chain attacks in 2021 https://www.digitalshadows.com/blog-and-research/supply-chain-attacks-in-2021/ MeteorExpress Attackhttps://www.mbsd.jp/research/20210721/blog/ https://labs.sentinelone.com/meteorexpress-mysterious-wiper-paralyzes-iranian-trains-with-epic-troll/PwnedPiperhttps://threatpost.com/pwnedpiper-bugs-hospital-pneumatics/168277/ https://arxiv.org/abs/2105.13442Hopper Security Toolhttps://latesthackingnews.com/2021/08/02/hopper-the-security-tool-that-protects-enterprises-from-lateral-network-movement/Also, don’t forget to reach out to - [email protected]

ShadowTalk hosts Sean, Alec, Rick, and Ivan bring you the latest in threat intelligence. This week they cover:- CISA guidelines on frequently exploited vulnerabilities- Q2 Ransomware roundup/BlackMatter & Haron (new darkside/revil and avaddon), REvil ACH- With PunkSpider back, what are the implications of using this tech?Get this week’s intelligence summary at: https://resources.digitalshadows.com/weekly-intelligence-summary/weekly-intelligence-summary-30th-july***Resources from this week’s podcast***Domain monitoring solution guide: https://www.digitalshadows.com/blog-and-research/getting-started-with-domain-monitoring-part-3-remediation/REvil: Analysis of Competing Hypotheses: https://www.digitalshadows.com/blog-and-research/revil-analysis-of-competing-hypotheses/ Subscribe to our threat intelligence email: https://info.digitalshadows.com/SubscribetoEmail-Podcast_Reg.html Also, don’t forget to reach out to - [email protected]